Citrix NetScaler ADC and NetScaler Gateway known exploited vulnerabilities
We track 13 CVEs in Citrix NetScaler ADC and NetScaler Gateway. 12 of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2022–2022). CISA flags 3 of them as used in ransomware campaigns. The most recent is CVE-2026-107406.
Also listed as: Application Delivery Controller (ADC) and Gateway · NetScaler ADC and Gateway · NetScaler ADC, NetScaler Gateway. CISA, NVD and vendor advisories name the same product differently; each CVE page keeps the wording from its source.
- CVEs tracked
- 13
- On CISA KEV
- 12
- Ransomware use
- 3
- Rated critical
- 7
Every Citrix NetScaler ADC and NetScaler Gateway CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2026-107406 Memory overflow in Citrix NetScaler ADC and Gateway SAML handlingwrite-up | [ CRITICAL ] | 9.5 | 0.5% | — | — |
| CVE-2026-88779 Citrix NetScaler Memory Buffer Flaw Enables Denial-of-Service Attackswrite-up | [ HIGH ] | 7.5 | 0.6% | ||
| CVE-2026-88772 Citrix NetScaler ADC/Gateway RCE via Memory Buffer Mishandlingwrite-up | [ HIGH ] | — | 1.3% | ||
| CVE-2026-88771 Citrix NetScaler ADC/Gateway Unauthenticated RCE via Input Validation Flawwrite-up | [ HIGH ] | — | 1.1% | ||
| CVE-2026-19490 Critical authentication bypass in Citrix NetScaler ADC and Gatewaywrite-up | [ CRITICAL ] | 9.3 | 23.2% | ||
| CVE-2026-8452 Citrix NetScaler ADC and Gateway Memory Buffer Overflowwrite-up | [ CRITICAL ] | 9.8 | 1.0% | ||
| CVE-2025-5777 Citrix Bleed 2 — NetScaler ADC/Gateway memory-disclosure leaking session tokensransomware usewrite-up | [ HIGH ] | 7.5 | 100.0% | ||
| CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | [ CRITICAL ] | 9.8 | 10.6% | ||
| CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | [ HIGH ] | 8.2 | 57.6% | ||
| CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | [ MEDIUM ] | 5.5 | 3.2% | ||
| CVE-2023-4966 Citrix Bleed — NetScaler ADC and Gateway Sensitive Information Disclosureransomware usewrite-up | [ CRITICAL ] | 9.4 | 100.0% | ||
| CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerabilityransomware use | [ CRITICAL ] | 9.8 | 99.7% | ||
| CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | [ CRITICAL ] | 9.8 | 6.9% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/citrix.json.
Our Citrix NetScaler ADC and NetScaler Gateway coverage
- Citrix NetScaler: Critical CVSS 9.5 RCE, Patch Now
- Citrix Patches Third NetScaler Zero-Day in Two Weeks
- NetScaler Web Shells Confirmed: KEV Deadline Is Today
- Citrix Patches NetScaler Zero-Days CVE-2026-88771, -88772
- CISA Sept. 12: Patch Cisco, Citrix, Fortinet Today
- Citrix NetScaler Auth Bypass Now Exploited in Wild
- Patch by Friday: Citrix NetScaler CVE-2026-8452 in KEV
- Citrix Patches Critical NetScaler Auth Bypass
- Anubis claims Fairlife hit, 1TB and Nutanix encrypted
- Anubis Ransomware Exploits Citrix Bleed 2
Other Citrix products
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.